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#JgI 2 0 0 3 - 0 1 6 7 6 1 ^- v : 1/ 

[*HMffi»Jfc*>|EH] 
1 1 

t ItCmo d n <7)mMZM LX%h ti2>m&%t<vm±£.$CM g t £fflv>T 

Tiaoia^ (i) , (2) -eSESfi&g!, g 2 ££^M<b LT«i-£ii£ 

AUZtlfzZfXm^ttLX^ ±|B&HJ» In, g lf g 2 ( iJifl'aftrl, r 
2^fflv>-C. TIBOM#S: (3) , (4) ■C^S*i*l©-3-:fcC= (01,02) £ 



gl=g s(p-l) ( mo d n) (1) 

g2 = gt(q-l) (mo d n) (2) 

Cj = m • gj 1 "! (mod n) (3) 

C2 = m * g2 r ^ ( mo dn) (4) 



(fzfzL, gcd Is, q — 1 1 = K gcd It, p-lf =Ut*) 
2 3 

tCmo d nO?H^:?ri&L-C^#^tt^^P^ft^«g tZm^TTtttm 

A^^n/c^m^L-C, In, g il is «t tTSLSfe r £ffiv>T. 

TIBOH^ (3) '• -C^^tL^Bf^C^^-r^Bt^b^^t fcfltx.*: 

gl = g s ^ p- ^ (modn) (1) 

C=m • gr ( m o d n) (3 ) ' 

(fcrtfU ^tffffcb =size of p (bits) t?*oT, 0<m<2b-l > gcd 
Is, q- 1} =1 
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2/ 



±Um^JCC\ l zTm<Dmi&$:-C7f;Ziri2> e £2rax.T, C= (Ci, C 2 , e) £ 

(fc£U e = h (d) ( h fi— :£|p]14^ 7 yaRt) > d= (Ci+C 2 ) /m 
(mo d n) . C i = m • g\ rl (mo d n) C2 = m • g 2 r2 (mo d n) <bi~ 
h 0 ) 

[nr*g4] 
itmm 5 ] 

6 ] 

t SE&Km o d n<7)?I#^MLT#^tL^^^<7)ft^:^:^g 
TiBOM#5*; (1) , (2) -e^^tt^g!, g2 t^PiItLtfflv^i:i:^ 
ttrl, r2^t, TSBOMffc* (3) , (4) "C^^ii^ftm* 
Bf^kL/cBf^C= (Ci, C 2 ) ^IIL> 

7x;uv-o/j^i^fflv^Ti£orii^ (5) , (6) xmztih^mm^ 



gl = g s(p-l) ( mo d n) (1) 

g 2=g t(q-l) (mo d n) (2) 

Ci = m • gi'1 (mo d n) (3) 

C 2 = m • g 2 f 2 (modn) (4) 

a = C i (modp) = m (modp) (5) 

b=C 2 (modq) = m (modq) (6) 

m=aAq+bBp (modn) (7) 
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#ff 2003-016761 ^- v : 3/ 

(fcrtfU gcd Is, q-ll =1. gcd It, p-l| = 1 > A q (mo 
dp) =1, Bp (modq) = 1 <hf &) 
7 ] 

Hifcp, q^Hp^«li:U4iU -e<Offn = pq£, §U&s<h,.g 

#5$; (1) T^£ft&gi££&$&fcLT£j£U A*§^¥imt:WLt 
, ±ffi3rB§& In, gil ioctr/SLitr £ffi^T, TK^Mi^ (3) ' 

gl= gs(p-D (m o d n) ( 1 ) 

C=m • gr (mo d n) (3) ' 

m=C(modp) (8) 

(fcrtfU gcd Is, q-ll =1 W) 
[fjf^ 8 ] 

t lti:mo d nWli^iltf ^til»*i»f ^4«g t ^fflv^t 
Tffic9M#5S; (1) , (2) -e^^ti^gi, g 2 i^PIIi:Lt«tl.i4 
fifgi:, A#S*ifc¥:fcmK*tL-t\ Jife^M In, gl , g 2 l S.fctfSUBc 

rl, r2'«rfflv*T, TIS^Mi^ (3) , (4) "?$LZti&m%rXCi,C2* 

fflv^TTIE<7)M#^: (5) , (6) -cm^^^'Siimm^Xa, b££j£U K$ 

■% m * l , m^imm zn^ w*\tmM^&. zmt-r^z m^-itrnm t*m 

g 1= gs(p-l) (modn) (1) 

g2 = gt(q-l) (modn) (2) 

Ci = m • gi rl (modn) (3) 
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(4) 



(7) 



(5) 



(6) 



(fzfzL, gcd Is, q-ll = 1 > gcd It, p — 1 1 =1, Aq (mo 
dp) =1, Bp (modq) =1 tt*) 
[If M 9 ] 

«:p, qOHp^ifitLt^U f©in = pqt SLtfe: s t , g 
memo d nO^^Mt-C#^ti^>^i^Oft^;«^ g i^ffl^TTffi^M 
(1) ^$^gitS:&iBitLt4BEt^a^#St, A2J$*i£ 
¥imdtLt, ±3E2r|3IJ& In, gl | £> J: OffiM r £fflv>T, TIBOH^ 

gl= g s (P-D (modn) ( 1 ) 

C=m • g.r (mo d n) (3) ' 

m = C (modp) (8) 

(fcrtfU gcd Is, q-ll =1 til,) 
[ff^^ 1 o ] 

t -h, nemo d n<D&M*iMLxwhn&m&&<vmjt£.$LMg t zm^x 

Tffiow^ (l) , (2) -e^$*t£gi, g 2 t^iitu^n^ 

AU^tLTtz^mHWLT. ±IE^r^ In, g lf g 2 l £J:<mifcrl, r 

2^fflv^r, Tfsop^i^ (3) , (4) xmzn&m^jcci, C 2 %£-J&-fZ> 

gl = gs(P-D (modn) ( 1 ) 



tUiiE# 2003-3105747 



# m 2003-016761 




(2) 



(3) 



(4) 



(fcrtfU gcd Is, q-ll =1, gcd It, p-l| =l£+&) 

umm 1 1 1 

stikp, qo^pWiat^u Wn = P q^ mist, m. 

XtlZKfz^JCmlzttLX, ±tttmm In, gil £«fc t^SUfc r fcffl^T, 

"So 

gl=g s ^P -1 ^ (modn) (1) 

C=m • g r (m o d n) (3) ' 

(fcrtfU ^HH'ltfRb = size of p (bits) tl>ot, 0<m<2b-l, gcd 
Is, q-ll =1 t-rz) 

umm 1 2 ] 

2oc7)^p, q «it LtML, -eco|tn = p q <h , 2oOlMs, 

ru<Dm^ (i) , (2) T^t$*i&gi, g2t^fflitufflv^tti 

tC, SLItr 1, r2^fflv^ TISOM^ (3) , (4) *i&¥£m £ 

Bf^l:L7t:Bf^C= (C ls C 2 ) ^«L, 

7 x.)P-r~<D4^m^m^rrm<^m^ (5) , (6) -m^&^ifBi-^ 

I38#:£ (7) ^T^-f^Cm^iJimU ff-^M£fif-? ZtZ&WLt-fZISL-flr 

gl= gs(p-D (modn) ( 1 ) 

g2 = gt(q-l) (modn) (2) 

Cpm • gj rl (modn) (3) 

C2 = m • g2 r ^ (modn) (4) 
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a = C i (modp) =m (modp) 
b=C2 (modq) =m (modq) 
m=aAq + bBp (modn) 



(5) 



(6) 



(7) 



(fztzL, gcd Is, q-l! =1, gcd It, p-l| =1. Aq (mo 
dp) =K Bp (modq) =Ut^) 
[fit ;M 1 3 ] 

ftp, q^^p^tltLTML, ^ln = pqi:, £Ltfc s <h, ^ 

(1) tt$^ gl tmiitLTMU A*£*i^¥3Cm^*j-L-C 
, ±fS^^H In, gil tsXXfZmr £ffl^T, TIB^Ki^ (3) ' "CfS£ 

7i^-T-0/J^3S^fflv>TTffi(7)M#^: (8) ^M/c-r^m^jitii U m 

gl = gs(p-D (modn) ( 1 ) 

C=m -g 1- (modn) (3) ' 

m = C (modp) (8) 

(fc/fU gcd Is, q-ll =1 tn) 

[0 0 0 1] 

z\tih*m^tz$g J ilr*s*7-^Km-S-Z>i>V>X~$>Z>o 
[0 0 0 2] 

[0 0 0 3] 
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[0 0 0 4] 

&Hiaiie^S:oft^W=0:«i: LT(±, R S AHr^ft#5W**o ' 
[0 0 0 5] 

Z\<DR S AfflF-JHfc^aSli, 2oo3f&p, q^fM^itU4)£L, 
[0 0 0 6] 

£ft£m-^-r&£*^2 0<7)*§£5^fcp, q 

[0 0 0 7] 

WNfcfcltt 1 1 

iflf 8 - 2 5 1 1 5 (1 9 9 6^9^27 B2rM) 

[0 0 0 8] 
[#IM2] 

#PI2 0 0 0 - 2 1 4 7 7 7-^23R (2000^8^4 B^rM) 
[0 0 0 9] 

[ftm&m&kLxd t-tzmm] 

= p q ?MI £ 10jSv£-e200«fISO^ § $ Kl-&&3?ri** •) > Myitis X XfWIr 
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[0 0 10] 

R S ABf-SHk^ii, f^ftt^LT&fK 2oof^^^^3<0 
[0 0 1 1 ] 

[0 0 12] 

mm % m&k-t & 

tii: ^60ltn = p qt, 2o<7)gli$:s, tt, StCmodn© 

a#*ttLT#^n*lftft»0«^«illgfc ! £rffl^"CTfSO|»«^: (1) . ( 
2) -e^£*i&gi, g 2 t €:5rHJ«fc LtMt^i^I^t, 
iml^Lt, _hfE2rP^ In, g lf g 2 ( ^^Mrl, r2^fflK, T 
U<Dm^ (3) , (4) -e^$tL-2>Bf^C= (Ci, c 2 ) ^M-r^Bf-^fk 

gl= gs(p-D (mo d n) (1) 

g2= g t(q_1) (mo d n) (2) 

Ci = m • gi r l (modn) (3) 

C 2 = m * g 2 r ^ (modn) (4) 

(fcrtfU gcd Is, q — 1 1 =1, gcd jt, p-ll =ltt&) o 
[0 0 13] 

±SBO«j£HJ:*itf, &BB«fcL"r&j£Lfc«gi, g 2 S^ *ti?fi (p-1 
) , (q-1) ^if^^t), 2rP?3M In, g lf g 2 | £fflv>T£j£L 
TtB&^Ci, C 2 &, (p-1) , (q-1) (D^^m^^fl^ffl^^X^hfz 

ioBf^Ci, c 2 £m-sHt1-£l^&^-c. 7x^7-tf)/hSi (a p-1 
= 1 (mo dp) ) fa*\z®ftil-tkZ.b&-e&ho 
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[0 0 14] 

q :nWi^:Ltlv^i:H{:, j p , q | t%l 

&s, t fc*fflv»r, -C-tL^tt (p- 1) , (q- 1) (D-<£m$:^tf£7^ 

mm igi, g2f muv^o 

[0 0 15] 

<2rM I gi, g2l Kov*Tfc. SL^^fflv^T, (p-1) <t^£ 
[0 0 16] 

H3M In, gi , g 2 l (p-1) , (q-1) <D^.^m^^^tz^ 

[0 0 17] 

■7i;U-7-<7)/J^31(i, aP-!=l (mo dp) T^StU (p-1) <D-<£ 

mz^&mznLx, mo dp (DiMw^m-r^t-c^^m^^ ru ^§;t£-£ 

Sl^fflv^:t-c\ 2o<7)^fHf^^'b¥^:m^m-^'fb-e^^>o 

[0 0 18] 

*!§^<7>B£-^fc^g-C(±. J^±OJ:^^ lp, ql Srffi^T, 

ffiJ£&ft»t:"^£t In, gi, g 2 | *£J£U Bff^tflSm^ti-ifCltttiTi 

[0 0 19] 

^:||Hq(7)Bf^b^e^i3tt^^tt^o^rfi, ^HflM Igi, g 2 l k 
(i, ^ti^*i£lifcs , t ^-B^ttT^/i*^ <&^fl^tL-Cv^^r^li In, gi 

, g2 i (±nv^cKj^«^^^tL-cv^ 0 iot, ztih(7)^mmm.^hm^ 
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^*<t> r s a m^ritx^ t mmx& z> 0 

[0 0 2 0] 
[0 0 2 1 ] 

WtLt^tL, -eoftn = p q £Lf£s<b. StCmo d nOlI?:i 
LT^^n**?£^Oft^i£«gi:S:fflv»-CTIBOM#S: ( 1 ) "C^SfiSg 

fflft In, gi( JsiTOr^i^T, TffiOM#5£ (3) ' -e^£*L&B&-^ 

gl=g s (P"l) (modn) (1) 

C=m -gr (modn) (3) ' 

(fcfiU <2r^'W^b =size of p (bits) f^ot, 0<m<2b-l, gcd 

Is, q- 1| =1 fc-fS) 

±ffiO*^U«t*t(f. £-HfMi£ LT£j£Lfc«gi«:> (p-1) (D^m* 

^AsX&v)^ temm u, gii im^x±WLLtzm^rXci>, (p-d <t>^ 

§#fc£^A,-CV*&/c*!>, 7x^7-©/J^I ( a P-!= 1 (mo dp) ) 
[0 0 2 2] 

q -*L&$&^li£: LTfflV>£ t £ |p, q| ttl 

Wis, ti»T, tfitfi (p-1) <&^§Jfe*-£trJ: ?K&Mftgi&£ 

[0 0 2 3] 
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[0 0 2 4] 

K^raiau^ In, g if zm^x, (p-i) o^§**^^"efE 

£ ti & tz & „ *r<DQ&itfc (±7x^7- <?Vh jeS £ ffl v > & i ^"nTfisT £> * e 
[0 0 2 5] 

7i;v-r-^>/h5ea(±, aP-!=l (mo dp) "C^SfU (p-1) 
[0 0 2 6] 

iot, lp, qf £ffiV>T, (|#*ti-»-C&gai In, gif 

[0 0 2 7] 

s^ttiTv^Tt*^ &M$;fc.TV>&2rR!l» |n, gil tt£v>fclH«:& f »r*> 
UOkfifn&o iot, i*Le>0&HHt«^^>»arai lp, q| *n&fzibKte 

[0 0 2 8] 

[0 0 2 9] 

±IEHS-^i:CHTfE^>ra^T*^$^* e =S:SPx.T, C= (Ci, C 2 , e) 
-tZ>Zttf£*)fttL\<*o (fztzL, e = h (d) (hli^fi^ryant 
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) , d= (C1+C2) /to. (modn) „ Ci = m • gi rl (modn) , C2 = 
m • g2 r2 (modn) b~th) 0 
10 0 3 0] 

ifcL&<&&£#>. at&aa^ui-^i:^:* (cca2) wi-ctttt^* 

[0 0 3 1 ] 

e tt^y vir^m£ffl^Tft#£*iTV>&7t«^ 3 2bits£ fcfi 6 4bi 
[0 0 3 2] 

[0 0 3 3] 

-tacit?. $lx.fi\ Bf^CH#StL^>SL^^-r*-^^^»L^2tf f 

?ij<7)7 :? -^^-x?r^A6fflittTi3< zt-c, m^kfamzftimz^ z\<vr 
- * ^ - 7. h Mfc-t %> & » Sr 0 m L T £ ffrfc-r & - 1 WC # & # , 

[0 0 3 4] 

ioT, 0!)x.t2\ ^*<7)R S ABS-^^fcJtKLT. tHt*£«fc LXm^it 
jBMiftMit-e & & tti>l*z^ Sfttl(:ot>tl)mo d p *>i*#£Jfci-rt?»t 

[0 0 3 5] 

2003-3105747 
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[0 0 3 6 J 

«**JlliLr»^^*&»0«^jKaggi:*fflv»TTIBOB8^ (1) , ( 

^r. Tiaoiw^ (3) , (4) x-m^n^^cmim^ritLtzm^-xc= ( 

Ci, C 2 ) *S«U 7x^-7-<D/J^I$:ffli/>tTfEOiM (5) , (6) 



gl = gs(p-l) ( m o d n) ( 1 ) 

g2=g t(q_1) (mo d n) (2) 

C i = m • gi r l (modn) (3) 

C2 — m • g2 r ^ (modn) (4) 

a = C 1 (mo dp) = m (modp) (5) 

b = C2 (modq) =m (modq) (6) 

m=aAq + bBp (modn) (7) 



(fzfzL, gcd Is, q-ll =1, gcd It, p — 1 1 =1, Aq (mo 
dp) =1, Bp (modq) =1 t-?2>) 0 
[0 0 3 7] 

±SEO*J&fcJ:*Uf, «tL«L/:igi, g2*±. f^^n (p-1 
) , (q-1) £H§£i In, g lf g 2 l £fflv>T«L 

^Bt^ci, c 2 &> (p-D , (q-i) o^§**-e-^-rtt^-e^&7t 

= 1 (modp) ) £fflv>T. fBf^^-^>fb-t&ifc7&*-CS*o 
[0 0 3 8] 

-r **woa-^fk«ii**$«i-J5ie^-i:ii, u, gl , g2 i 

£ffl^T, (p-l), (q- 1) (D^^mZ^Astz^X-mZtlZtztb, *<Dm 
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[0 0 3 9] 

7 jn;i/-7-<7)/h^S(i. aP-!-l (mo dp) X^Zti^ (p-1) <7)^£ 
^£'a tfifc^t LT. m o d p (D&MZm^^ t X^r^M^ TU KmM2-& 

10 0 4 0] 

o 

[0 0 4 1 ] 

IfitLT^iL, ^<7>ftn = pq^ tisi, ltCmodnWS|« 
LT{|t)*i-&Jiiftj¥Ot^j|g t*ffl^TTfEOKI#^ (1) T^^tt^g 
lt^MtLT4IU A^ftT^^mK^LT. ±ie^H In, gl | 

isxzm&r zm^x^ Ttz<nm&&, (3) * ^jn-sit^jc^iu 

gl = gs(p-D (m o d n) ( 1 ) 

C=m • gr (mo d n) (3) ' 

m=C(modp) (8) 

(fc£U gcd Is, q - 1 I =lti-&) o 
[0 0 4 2] 

±IBOflU£KJ:*U;r, In, gl ( £ffiv>T£j& LfcWF-^fcC (i> (p 

-1) C0^i^^^•^-ev^^^6 > 7xjV7-£0/J^I (aP-i^l (mo dp 

[0 0 4 3] 
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[0 0 4 4] 

tfz, ^^tSimft$ti4Hfili, In, gil 

V*t\ (p-1) O'^&lfc&'S/otz&.'C&Zin&tzft. -t^m^tiZlt 7 
- O/J^S £ ffl d ri*nrt&-C£> & o 
[0 0 4 5] 

7x^v-(7)/jN^Itt, aP"l=l (mo dp) T^^ft, (p-1) 
5fe*-grtra[JC*tLT, m o d p C t T-e^* TU KflMIS-tf 

hz\b fft: # £ o 
[0 0 4 6] 

iot, #iK&&«ft lp, q( ^fflV^T, tt^fttW-e&IBft In, gil 

[0 0 4 7] 
[0 0 4 8] 

itit LT4iL> f cofn = p 2o<7)!SLms, tk, SftCmodn 

oi*l|[SrJfeU-c»'btL**^o*^jS;iBg t^m^xTt^cDm^ (l) , 
(2) -e^^tL^gi, g 2 fc*&HftfcLT£j£^&«&j£^&£, XtlZtitz 

^JCmlZttLX, ±ittfflm In, gl , g 2 l & <t CTgL» r 1 , r 2 fcffl^T, 
TIBOM^ (3) , (4) T^$tt^Bf^Ci > C2^^i _ ^Bt^?I^# 

st*«x.^Bt^tnft, ±i m ^rVc&m. -en th $ n £ b& c i w c 2 * ztis 

U 7i;i/-r-^/h5ta«rfflv^-CTfB^M#S: (5) , (6) ft&^fSBg 
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gl = gs(p-l) ( m o d n) ( 1 ) 

g2 = gt(q-l) (mo d n) (2) 

Ci = m • gi rl (modn) (3) 

C2 = m • g2 r ^ (modn) (4) 

a = C i (modp) — m (m o d p ) (5) 

b = C2 (modq) =m (modq) (6) 

m=aAq+bBp (modn) (7) 



(fztzL, gcd Is, q-ll = K gcd It, p-l| =1, Aq (mo 
dp) =1. Bp (modq) = 1 tir2>) 0 
[0 0 4 9] 

(i, Ztl^tl (p-1) , (q-1) <D^£m£^A,X&10 , <kffim In, gi 

, g2 i zm^xtkf&tfzm^jcci, c 2 *>. (p-i) , (q-i) o^&m 

*J:fUfti^A,X^Z>tztb^ m^b^a^^v^T, y ^)V^~(D^h^M (aP" 1 

= 1 (modp) ) zm^r, m^c h c 2 ^mm^mit-rz>c\t^x^z> 

o 

[0 0 5 0] 

Mituffli^tnc, ip, qi tzms, ttzm^x 

, -ett^tL (p-i) , (q-i) o-<^^*^tf <£ d K^nan I g i, g 2 ( * 

[0 0 5 1 ] 

Sfcfc, <£fflm Igi, g 2 f i:^rt, a&fcffl^-c, (p-i) 

[0 0 5 2] 
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m u, gl , g2 l ^ffl^r, (p-i) , (q-n <v<&mz&AstzjZ:x»m 

[0 0 5 3] 

7x;i/7-(7)/hgIli, aP- J =l (mo dp) T^£ft, (p-1) <7>^£ 

ffc&^tH8fcK*tL-t\ mo d p^iSc#**te-t^fc-e-€-^>fN^* ru K«Mfr£-£ 

sa^fflv^c t-c, 2oo^=Bf^^ib¥^m^m^b^§^o 

[0 0 5 41 

H |p, q| £fflv>T, fW**ti-Jt"C&BHft In, gi, g 2 l *&J5fcU Bf#^ 
[0 0 5 5] 

ftmztiz&mm igi, g 2 i ki*. ^^Mts, t^^Tv^/:<6, 

^r^^tLTv^^r^a In, gi, g 2 l (iS^i:FWIf*>^f>titv^ 0 io 
Ct^O<2^lt^«^£t lp, q( *&&tz#>K^ nOfHW?: 

[0 0 5 6] 
[0 0 5 7] 
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^itltLTML, ^in = pq^ gLIfc s t > HCmodnWil^; 
^Lrt#^tL^>*Sf^<7)S^«g i^fflv^-CTIB^M^ (1) -C^^tt^ 

In, gi( t3±Zf%imr TIE<7)M^ (3) ' ^^tL^Bf 

-t:* c & * bi ^itmn^& tzm-rz m^itmm. t , ±mm^itmw & % 

gl = gs(p-l) ( m o d n) ( 1 ) 

C=m • g r (m o d n) (3) ' 

m=C (mo dp) (8) 

(fc/fU gcd Is, q-ll =Un) o 
[0 0 5 8] 

±iaoM:^ct*U£\ Bf^fc^anisv^T, In, gil zm^rYPfc 

ztitzm^Jccte. (p-i) o^sufc-gx-ev* ll-^ffc^s^&^r 

, y ^)V-^~(D/b^M (aP-!= 1 (mo dp) ) -COBf^C £6H 
[0 0 5 9] 

iO««r« lp, qt t%l%ts, tt»t, (p-1) <7)^^^«r 
^Ttr J: -9 i:&iigi*MLtv^ 0 
[0 0 6 0] 

ZblL Ifip©t^Xbt«i:^T, y*-vmKS£(7)f|rlJPl£ 

£fcmzm^2>zt%<, x t)ffij$.%mmz£ ^m^imm^no z £&-?&*> 

o 

[0 0 6 1 ] 
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ft^\ (p-l) <7)^^^*^•^^-e^$^^^«^6. ^<Dm^1t^ity 
[0 0 6 2] 

7i;l/-r-<7)/h^31(i> aP-!=l (mo dp) xm^fr, (p-l) 
mZ&trmzttLX, mo d p«^It - tX^<Dm^ l~U ^§*£-t!r 
£ d £ &X # * o 
[0 0 6 3] 

iot, |p, q( £fflv>T, ffi^^ft^T^r^ In, gl | 

[0 0 6 4] 

fts^iiirv^^*, &M$*i-Cv>*&IMI | n , gl | 

[0 0 6 5] 
[0 0 6 6] 

fiatMU -eotn = pq^ 2o<7)SLms, t^ltCmodnW 

mm^mLxnhtt^mm^m^f&mg t^m^xTM^mi^ d) , ( 

IC^LT. ±3E42rBB« In, g b g 2 l iJi^Srl, r2»t, TIS^ 
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Kl#5£ (3) , (4) ^m2tiZ>m-%XCi f C2*&.fc-f2>Z.t>km%ktLX^ 

%) o 



(fcrtfU gcd Is, q-ll =1, gcd It, p-ll =lt-f&) o 
[0 0 6 7] 

p-i) , (q-i) ^£ifs£^A,-eio^ In, gl , g2 ! fcffl^T 

^L/cBt^Ci, C 2 &. (p-1), (q- 1) O^^^^r-e-^-m^-e 

aP-l=l (mo dp) ) £fflv>T, W^-^I^bi-^ Cl £ & o 

[0 0 6 8] 

ilBffifcLTMki: 1 !)!:, ^mmm Ip, ql iSLi&s, tt^fflK 
, Ztl^tl (p-1) , (q-l) (D^&mZ&ttXllZftffim {gi, g 2 l * 

[0 0 6 9] 
[0 0 7 0] 

^H^OBf^b^^ioT^^tL^Bf^fi, <&r« In, gi, 
g 2 t (p-1), (q- 1) O^Smfc^^-C^Stl&fcA, 

f(7)ifil:t:ii7x^v-^/j^i^fflv^ d t *«pr^»c** 0 

[0 0 7 1] 

•7a.;i/-r-c0/h^ilti. aP-!=l (mo dp) T^Sfu (p-1) <t^£ 
lp!*^tf»:H*tLT, mo d pO«#=Srifei-dt"e«€-0*J^«: TlJ 




(1) 



(2) 
(3) 



(4) 
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2o(7)^fBf^^ib I F^:m^^I^bT^^o 

[0 0 7 21 

ffi#^ft#-e^H In, g lf g 2 l *£)£U Bf^^W#^ft#-e#tti-C§ 
[0 0 7 3] 

f±, **i«€**LSLfts, t3& s ^i*fCV>*^:*, &ra$*tTV»*&H!iai In, gi 
, g 2 l {i2vniB9» ? Kff^^I^tL-cv^ 0 ioT, itLt>o&Mflt«^^»ap 
SI |p, q| £f#££#H(±. n(7)mm%LfrM*ft7&mrf&Z>o Z\ZX\ n<D 

R S A Bf^^ t ^fiffiT* * o 
[0 0 7 4] 

Srfr-9 z\ttfm&z%Z> 0 
[0 0 7 5] 

**WOHff^b*j*ti, ±:fBOlJMH*J!*ft1-&fcafc, ftp, q<£>d*>p£ 
ifitLt^U ^in = pqt, SLtfcs<t, ltCmodn«?:l 
LTf#£*i*m&3M9*::fc£j£i!5£g £ £fflv>-CTiB<Z>M#5£ (1) T^Sti^g 

iti&mmtLnkm-r&tttiK, xuztitz^icmizttLx, ±m<&mm 

In, git *5«fctfSUEfcr&ffln-C, TfBOM^S: (3) * -C^^tL^Bf^C 
ci L-Cv^ 0 

gl= gs(p-D (m o d n) ( 1 ) 

C=m-g r (modn) (3)' 

(tztzL, 2rHS'lf#b =size of p (bits) tfiot, 0<m<2D-l, gcd 
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Is, q- II - 1 t-tZ) o 
[0 0 7 6] 

£fft£^A,-C£*K in, gi, g 2 l £ffi^T£j&L£Bf-S§-£Ci&. ( 

p-1) <^;lfis£#A,-t;-^;E>/ci6, -cOBf-t^Ci^^'fki-^l^^isv^T, 
^i^-GO/J^S (aP"l=l (mo dp) ) £fflV>T, ffCffftt^I 

[0 0 7 7] 

matfflv^iHi:, -<t)^ii ip, qi t$i$ks, ttzm^x 

, Zrti*?in (p-l) co^^^^^-tr J: d ^^Pjflagi^^^L-Cu^o 
[0 0 7 8] 

[0 0 7 9] 

H&fc, 2jh& u, g it zm^x, (p-i) o^#*«r^^-c^$n 

[0 0 8 0] 

7i^7-W/hglli, aP-!= 1 (mo dp) -C*^£*U (p-l) <D^<^ 

mz^tsmzttLx, mo d p<Dmm$:n-tztx-*<DM&* ru kamis* 

[0 0 8 1] 

iot, Ip, ql fiM£&ftJ§:-C£P*PJIi In, git 
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[0 0 8 2] 

s* f ^itLT^4^*, £BB$ftTv>£2rl3a& In, gl | (ilTv^P^$b»*> 

flfp qrt ? *£ < **effiiiTNfcoT. ^-O^li^O R S AUfftM t ^ 
[0 0 8 3] 

ioT, #f&95<Z>li^ffc;fr&K<fcfttf, ^tt^Sv^^OR S ABS^-ffc^ 
[0 0 8 4] 

2) -Cg$n-5gi, g2fc*&H«fc LTfflv»a£fc&U, &&r 1, r2^ffl 
v^T, TiEtf>n«5S (3) , (4) xmZtl2>¥Xm*^itLtz^J:C= ( 
Ci, C2) *$ffirt, 7x;W-(0/J^I^fflv^TEOiM (5) , (6) 

3£fflv*T, TIBOM^ (7) trifcmmSi^L, aWfcMsS&fr "9 - 



gl= gs(p-D (m o d n) ( 1 ) 

g2 =gt(q-l) (modn) (2) 

Ci = m • girl (modn) (3) 

C2=m • g2 r ^ (modn) (4) 

a = C i (modp) =m (m o d p ) (5) 

b=C2 (mo dq) = m (modq) (6) 

m=aAq+bBp (modn) (7) 



(fc£U gcd Is, q-ll = U gcd It, p-l| = 1 > A q (mo 
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dp) =1, Bp (modq) = 1 b1rZ>) 

p-i) , (q-D co^iHt^^-eis^, £P*l§i In, gi, g2 ( ^ffl^-r 

*ki&Lfzm^$:c h c 2 &, (p-i) , (q- i) <7)^£ffi£-eft-r*v^A,T- 

a p-l=l (mo dp) ) £fflv>T, tt^U«^k-T* £ 7& ? T^ & 0 
[0 0 8 5] 

1- **woa^k^i*tci3\/»ra, ffip-^5:*±, #Hi§& In, g lf g2 

I £^T, (p-l) , (q-l) 
[0 0 8 6] 

7x^-7-^11^ a P-!= 1 (mo dp) "C^£tU (p-l) 0V<§ 
**^trjBc^*tL-C, mo d p flit £ fc-e* KflMIS-tf 

-2) i t ^-e § & o 

[0 0 8 7] 

«toT. Bf^Ci, C 2 ^> 7x^7-^1^11^, Bg^Ci, C 2 
[0 0 8 8] 

o 

[0 0 8 9] 

*HiO®^t^tt, ±ffiO»B*fl*fci-4fci&fc, ftp, q^Hp?: 
LTMU ^in = pq^ SLlfcsi:, ItCm o d n <D : m%ZM 
L-CH5>*i-6#fe»Oft^4fiiSgi:«:ffl^rTffiOH^ (1) t^Wg 
it^fiiliU^L, A^SfrfcspifcmHttLT, ±I£^K!» In, g if 
fciMr^ffl^ TSBOM^ (3) ' -C^$tL4B|fJCS:$f L> 

7^;i/-7-<7)/J^S^fflv^TT§30Mi^ (8) SrSI^I-^mSr^tbL, ft 
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gl= gs(p-l) ( m o d n) ( 1 ) 

C=m • g r (mo d n) (3) ' 

m = C ( m o d p ) (8) 

(fzfzL, gcd Is, q-ll =1 

, (p-1) <£>'<£#fe&#A/T?v>&rt:#>> 7x^7-^| (aP-i^l (m 
odp) ) £fflV>T, Znm^-XCZffi&K'&^rlt-t'ZZtrf'C&Zo 
[0 0 9 0] 

[0 0 9 1] 

*§&m<Dm^kJjmz£ n^itzixhm^it, &mm in, gii 

(p-i) <7)-<^^^-^^fi^:-e^$^^^/I^6, f^lflti:ii7x 

[0 0 9 2] 

y j. <7)/h^31(i, a P-!= 1 (mo dp) (p-1) 
fH^frlfc^tLT, mo d pOilCJ^MlT-^^fiJ^ nj ^§^£-£ 

[0 0 9 3] 

iot, J£#&£ffc?ff& lp, ql £ffiV>T, ffim^ftm-e^MM In, gil 
7x;l/v- (7)/h^3 tz It £ ffl v > a d i: -cfgfig. ftH T # * *i> > Offj^ 
[0 0 9 4] 
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immm i ) 

<n m^i mm & £ ^t-t i t^e * & v iz z ti h * m *. tz m -> * r ^ > 

[0 0 9 5] 

y -tr - v (¥3C) m cDHf-^f t& «t Zf^it * ft 1 o 
[0 0 9 6] 

■T H2 KgrfJ: 9 fc, ^ y-b-v mfc&HMt In, gi, g 2 

it, mttmRtgfe Ltzmi*. mmm ip, qi zm^rzimR* ru c 

$ ^ -y -t - v m *m-%-f 2> o 
[0 0 9 7] 

[0 0 9 8] 

?c>i:, Bf^-fk^e llli, 1 2 *3 «t UT«#ftatJtS« 1 3 £fltx.T 

[0 0 9 9] 

i4«12li, X •y*-Vm(Dm^t&£Vtm j ^it\ l zmmir2>&fflm In, 
gl, g 2 ! tf«it Ip, ql kZZtiJrtuk&lrZo &Hf§M In, gl 
, g 2 ( fcJitFSMM ip, q! «t:ov^ti±, Mt:tilt^ 0 
[0 10 0] 

m^tmnmm l 3(±, XJjZtitz* ^-ymOT In, gi, g 2 ! * 
[0101] 

mtk&LUl 2frb%W& Ip, ql fc^tUfcoT, Bf-^jtCi, C 2 ^<b^ 
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-fc - : J m ZiS.^ L T tU^Ji" £ 0 
[0 10 2] 

I^i^C, In, gi, g 2 l ^ y-b- vm^-Bf-t'fkL-CBi 

-t^CCi, C 2 ^LtML, §HU;li:l3t^ < lp, ql Zm^xm 

[0 10 3] 
[0 10 4] 

£1\ iMi2CU« In, gi, g2 l ^)4tt:ov>r^t^o 

[0 10 5] 

^£j£S|U2fi, lp, ql (p, qii*# , ^0*fn 

= pq, g X m o d n «f s, t£gcd Is, q- 

ii =1, gcd it, p-ii =i*mtz-rftj&t-t2>b, <&mm in, gi 

, g 2 l <nn^, Igi, g 2 l WTOMI^ (1) &£tm&$: (2) -C* 

gl = gs(p-D (mo d n) ( 1 ) 

g 2 =g t ^ q-1 ^ (modn) (2) 0 

[0 10 6] 

±mm^ (i) , (2) utt. sims, t*^i<iT^4fcft, n 

= p qO^^±f£K#^: (1) , (2) tfi, 3fc£KKI#«r ^ £> ftfcJKSI 
£oTV>&o ioT, ^Zr^li In, g lf g 2 | ^fcfBMI lp, ql fcigiffii- 
fca&Kli, 2o<7)^§ : ^^i5:p, qo^-eab* TnJ ^t>JfH»^|(:J:otp 

[0 10 7] 

M^T. Bf^b^^fil 3JCi&_t|SM«* (1) isiOTOfl^ (2) -e^ 
S*L&3H3Hi Igi, g 2 l y-b-vmOBf^O^tCov^T^I- 
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[0 10 8] 

m^7*-y (¥X) URL, m<n<hi-^>) , r i, r 2 £SLIL m^SC* 

C= (Ci, C 2 ) ttl»i:> B|f5:C= IC1, C 2 ( fi. &Mtt In, gl , g 
2 I ^ffl^t, ^Tt:^(aoti?Wo 



[0 10 9] 

Bf^Cr(±, ±1BM1&5£ (3) , (4) C/Tfi^:, SLI&gi, g 2 

[0 110] 

fc*3, ±I2Mffc£ (3) .1: tfMfl^ (4) Wgjrl, g 2 r2 ^\ EI2H^i"«E 
[0 111] 

fit, IfMfitl 5CJ:4l®^Ki, C 2 ^f>^^-^<7)tf 
[0 112] 

m^imnmzi 5 w\ i P , qi ng-^fcci, 

[0 1 13] 

7xJV7-^gl ( aP-!= 1 (mo dp) ) £ffiv*T % (p-1) <D^£^ 

i>*izitix\<*2>ftMBfr* r 1 J K:i§*£«-<t^ filTt:^t$ 

a = C i (modp) =m (m o d p ) (5) 

b=C 2 (modq) =m (modq) (6) 0 

[0 1 14] 

-rCTN ±IEM^ (5) &£Zm&t$: (6) W*ai:ov»T, m>p, m> 




(3) 



(4) o 
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q-C&Ztzib, m (mo dp) fcitfm (modq) (±SL&"C£> 0 . ^y-fc-v 
[0 115] 

^H^OBf-^v^-rA-Cfi, ±IB2ooM#^: (5) fcitfM^j*; ( 
6) Kia&^T, tiAH^liffl^t^ >7*-y'm^t5o 
[0 116] 

i-£fc>*>, rpmAm&fcmzm^tiiz, ^^-/mii, ±iaw^ (5) & 

<fc£nig#5S (6) Clo'v^fiiTWMM (7) Ciotl^W/:^ Q&it 

m=aAq+bBp (modn) (7) 

(fztzL, Aq (modp) =1, Bp (modq) = 1 hf^>) 0 
[0 117] 

■t* *J: -9 (p-l)*> (q- 1 ) *«r^tr «£ 9 K#M» lg 

i, g2i £&j£u a^toi^nji, ^jc^v-o/hjea^i^HAiw^a 

[0 1 18] 

dfUCfciK #MtKtt*£tl-*-?42rH!iai Igl, S2( t4jS"elifcK>, 
TOU |p, ql tUfflv>s:^ J tlSo SfcK, 7x;i/v-^/J^Ii: + 

[0 119] 

£<bK, f-?^tt(:o^tk fg>$£ Ip, ql ZmWi-fZ>tzls6Kl±, 

ftmm in, gi, g2 i ©nit -ufi\&m%kn = P wmzti&ztfrb. 2 
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[0 12 0] 

immfm 2 ] 
[0121] 

tzov»-CJ4Rtlfc-C****, WpOt^Xb*^ y-fc-vmhOKI^-eftllKi- 
[0 12 2] 

'fXb^Hnit'c, loontxc^L, ztizim-tzfcrt^ffits- 

[0 12 3] 

'fXbtu&nu Wp^ffl^tTieof« (1) "t^s*i*2H«»g 
fc, (3) ' -cmzn&^'Xcz 2>o 

gl= gs(p-D (mo d n) ( 1 ) 

C=m • gj r (mo d n) (3)' 

(fc£U ^7-t-ymit^Xbhti, 0 <m< 2 b-l^^fe^^aTtf ) o 
[0 12 4] 

HUftfc, ^l^b^^fi^ 7x;l/7-W/hti ( a P-l=l (mo dp) ) £ 
fflv^r, TSEOM^ (8) fczgffi-T&o 

m=C(modp) (8) 0 

[0 12 5] 

Bt-t^ctcfi, gi^snri3«9, iifiio gl or« (1) 
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J: *K gilt (p-1) mi&A,-e\<*&tzX>. (modp) t K«fc «K 

# -5>o 

[0 12 6] 

^ y-b->^mi:oia«-ciif(iRi-4 1 t * k> ;«t^XbMti.o fit, 
^xm^-tztzfr. mtmm i t?/Bv>fc*sAsw&5&s*ffi^fc < r&#^^g 

[0 12 7] 

iot, ±fBH*fc^3E lWB&tv^f At ^fiffi Ogc£14 £ lEft Loo, 
[0 12 8] 
[0 12 9] 

^MH In, gi, g 2 l f±, ±iELfcJ:-?K, WT^MMt: J: o XZti^ti 

n = pq (0) 

gl = gs(p-l) ( m o d n) ( 1 ) 

g2 = gt(q-l) ( mo d n) (2) 0 

[0 13 0] 

(o) ~ (2) <th*>. ip, ql £S£m 

-r<DtfWti>&%fr*^Z-XfrZ>t, m&&, (0) t22o<7)*§;&!ttkp, q co« 

n<7>mm&frmfrbmmm ip, qt -7?> cd , (2 

) li, mrtw^i-H^ (10), (11) OiiMtPplStJKittiti 

Ip, q| fc#fcB 
gl = g s ^ p- ^ (modn) 
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=> g iQ" 1 = 1 (modn) (10) 

g2~S t ^ q_ ^ (modn) 

=> g2 p-1 = 1 (modn) ( 1 1 ) 0 

[0131] 

mm^. (1 0) &£tf (1 1) O^l^tmP^a^^i^ti^ ftHS^exponent 

ial-C&£<7)«tU (0) <vmm%LftM<7)m&'?l±. ft^»^sub-expon 
entialT&^o iot, In, g lf g2l /^M«H lp, ql £S§th 

-r 7t # k it s n <omm m^-m zn^ i> m& & x$> h z. t &t> & & 0 

[0 13 2] 

9 *£fc^firc*o-c, zomm&frmi. RSAHt^t^o^ 

[0 13 3] 

o 

[0 13 4] 

lo@(7)#ii:Lt(±, BT^tCi, C 2 ^-f±Mm^ (3) , (4) Kli 
mX*>Z>o lot, R S ABf-tffc^-efi, ^ y-fe-vm^Bf-^C 

[0 13 5] 

[0 13 6] 
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t!> ? -**- L & v> *i> , $ ^fc Bff^-***ra t: Hf^i C Xfo o T 
7C^ ^ 7 ^ - y ^ ^ 7 -b - y mo, miX$>2> 2> 0 <toT> 

[0 13 7] 

-s§- -> t; f- a o3c£14 n o v > x mm ~f ti tf &t o t is 19 -e * * 0 

[0 13 8] 

$f\ 1 o|Wj[ii L"C> jI#^3C&S (Chosen Plaintext Attack : C P 

a) KMir ^^mz-o^xum-r ^>o 

[0 13 9] 
[0 14 0] 
[0141] 

2 og^tSi: Lt> ^iSSMil^Bf-^-^:^ (Non-Adaptive Chosen Cipher 
text Attack I C C A 1 ) K*H-&££14Kov>T&ij-i-*o 
[0 14 2] 

d <7) 3«?nff ^Jc&miz , Bf #3: * -5- x. r c: *i *tj&-t & ^ r £ 
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[0 14 31 
[0 14 4] 

3ogcoi£Si: LT, iSiSM^^Bf-^-^:^ (Adaptive Chosen Ciphertext A 
ttack: CCA2) Ktf^ ^^{Z-D^Xtm-f Z> o 
[0 14 5] 

j£U 9~y-y v t%&m^^z^^x¥Xt t ^&bti&frzm'<2>ykmxfr'2 
x, ^m^-itLfz^9-y-y h tz&m^-jc&tuifisz^^m^xi) x^t^^ 

[0 14 6] 
[0 14 7] 

o^l^ *->fv Y t %Z>m^-3:C= (C.i, C 2 ) Ci, C 2 fiJ^T 

Ci = m • grl (m o d n) => Ci* = m • g rl+tl ( m o d n) 
C2 = m • g r2 (mo d n) => C2* = m • gr2+t2 ( m o d n) 
-li-C;fca6£C*= (Ci*, C 2 *) (4C**Ct*l>^ C**ti^ LTftm 

[0 14 8] 

zz\x\ ^mmfm^m^^xv-AXte, m&mmiRm^jcixmznLxnm 

Zmz-tt&tz&ltZ^ C = (Ci, C 2 , e) <hi-^>o 
[0 14 9] 

tzfzL^ re J fi> Ci = m • gi rl (m o d n) , C 2 = m • g 2 r2 (m o d n 
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) <fc*K d= (C1 + C2) /m (modn) "Zlb&frb, e = h (d) ( h it— 
[0 15 0] 

£ *UC «£ 19 , Hfr-^fcCliSK fcv»-9P!Iffl{±*4^ e £ 3 2bits3£f±6 
4 bits&c £ £ <h § * £ & X 'y-b-yWLti^l. e ^ 

[0151] 

DB (2, e) = [R |j= gi ri J (modn) ] 
( tz tz L .> 1 < i ^ 2 , l^j^e) 
C= (Ci, c 2 ) 

[0 15 2] 

[fill 

0 1 

C , = m • TTr, j k (modn) 

lb 
6 2 

C , = m • R 2 . j i < m 0 d n } 
[0 15 3] 

[0 15 4] 
[0 15 5] 
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^ti7'~D y ? ^ "7 T CI ^ & o 

[0 15 6] 

d«?ftyn 7 7li, Bf^Ci/ftt^ii#c7)XJr;U-eBf-^5:Cii, 

Ci2^B^bL, M<7)C 2 i^^af^tcov>T(imi<7)Bt^Cii, C^K^t 

£ ^mmm ^ t -e^a * £ o ^is-fb-e § & 0 

[0 15 7] 

fPJ&U C2J^I 3 #<^0f-^^C^'^^^ii^ W&JWv h b i= 0<^#K(i, 
[0 15 8] 

mi] 









Original 


2 


2 


Extended 


2/k 


2/k 


mmm 








Original 


2 


2 


Extended 


4/k 


2/k 



mourn) 
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[0 15 9] 
[0 16 0] 

tin, #Ht*fc*>^ nmmk* 2 / km^-mh-ttz z tvftfr&o 

[0161] 

iffl:Mt:ov^li, ^lTlx^^-Ti^^> rn-^gkttit, #J*9 
Jf^ov>T(;i4/k|inc, #Ktl^ov>Tte2/klIHc^£>^£ £ <h^^^ 0 
[0 16 2] 

[0 16 3] 

[0 16 4] 
[0 16 5] 

£1% Igi, g2l s (p-1) fct (q-1) /? 

(u, v) liJ^TW$$H^o 

u = ar+/?m(mod4)(n)) (12) 

v = g(«2r +/? 2) (mo d n) (13) 

(fcrtfU ^y-fe-vm, m^Me^<I> (n) , gLmrhl"^) 0 
[0 16 6] 

±Um^ (12) it), utC(±^ft3g^*3oJJJL±ab*/w*, Z<D^m 
< ZtltX^Z^o itz, JLfSWf^ (13) J:0, vtli, g, a, /?, r {± 
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^X%^<D^WiXh^tzib, Z.<D^m< Zti>X*£%^ 0 
[0 16 7] 

i tz, d <7)m%H l>7-t-y k ( u , v ) I OfSfiEisUi, J^TOP^^ 

( gl m g2) u= v m (m o d n) ( 1 4 ) o 

[0 16 8] 
Mv^-c, (14) ZMM-f&o 

[0 16 9] 

(gl m • g2) u= § ^ a m+ ^) ( a r+ /? m ) (modn) 
= g ( «2r+^2)m ( m 0 d n) 

= v m (modn) 

(fztzL, g a /?=gst(p-l)(q-l) = g st<j,(n) = i ( mo dn) hf^) 0 
[0 17 0] 

o 

[0171] 
[0 17 2] 

r-A. Bf^bTj^^ it/m^k^feti^ #fl/U£\ *B¥i2fiE. ^SiSSE, MJ-mm 

& x zfrnj-xtim \iz i> mm -r & - 1 &x § & o 

[0 17 3] 

ftp, qt:ov^f(7)ln = pqi, ( p - 1 ) £ «fc V s ( q - 1 

) (D^^m&ztfisms. t^frgi, g 2 t^^mm u, gi, g2 i 

, Bt-t^cc= (ci, C2) zftf&ir&m^itmw-t, mm^cizMLxy * 

jv-r-tD/hTzmzm^xm^-jcc ^^it-r^m^-itmwt^m^x^^ ztz 
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[0 17 4] 

[0 17 5] 
[0 17 6] 

[0 17 7] 

^tL&mi*»o*^jEfcigig t fcfflwrTSBoHMfc* (D > (2) -c^sna 

gl, g2fc*^0H»t U«t^i«f^^> A^SftfcsflfcmfcfcfLT, 
±8B2rKl& In, gi, g 2 ( £ <£ ^t&Ltfc r 1 , r2^fK, TE<OH^ (3 
) , (4) X~mZtt2>m j $$:C= (Ci. C 2 ) *^i-*Bff^ffc?1t#^Si:*fll 

gl = gs(p-l) ( m o d n) ( 1 ) 

S2 = S t ^ q ~^ (modn) (2) 

Cpm • gj rl (mo d n) (3) 

C2 = m • 82 r ^ (modn) (4) 

(fcrtfU gcd Is, q-ll =1. gcd It, p — 1 I =Uf^>) 0 
[0 1 7 8] 

*-*uJ>x., «tLT4iLtigi, 82^ **i*fi (p-1) , (q- 
1) O-^flfefc^A/CfclK In, gi, g 2 f *fflv>r^L^Bt^C 

1, C 2 &> (p-1) , (q-1) O^i^^^-^-W^-ev^f-*, ^OBf 
-t^TCi, C2*^^b1-^>l^^i3V^T. 7x^7-^1 (aP"!= 1 (mo 
dp) ) ^fflv^r, Wi|iH«^ki-*ii:76*-eS-6i:v^ar*«:l|-r&o 
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[0 17 9] 
[0 18 0] 

j£L, n = p q Slifcs^, ItCmodn^f^lLtfl^tL^H 

&»<Z>«^JSiSgfc«:fflv*-rTaBOlW^ (1) •C^£*i&gi*:*2HiB»*: 

I }3£Xm&r £fflv>T, Tf£^r»^: (3) ' t?$$*l4«H-iC*4JSt4 

gl= gs(p-D (m o d n) ( 1 ) 

C=m-g r (modn) (3)' 

(fztzL, teMm&b =size of p (bits) tiboT, 0<m<2b-l, gcd 
Is, q - 1 I =1 

Wx., <kmmt LT^«Lfe»gi«, (p-l) <7>^#ffc£^A,-C;Jo«9 
, ^HflU In, gi! £ffl^T£$L£Bg-^;£Cfc, (p-l) <Z>^£f££^ 
-ev>-5>/ca6, 7x;V7-<?)/J^I ( a p-l=i ( rao dp) ) £ffiv^-c, CKDPf 
^ C £ fflf J£ \zM^VC$ ^^t^t^tt^M^t^o 
[0181] 

[0 18 2] 

±sauff^s:cnTSBoiw«^:-e^$n* e *SPx.T, C= (Ci, C 2 , e) t 

t*it* J J:*)ffSU>o (fcfc'U e = h (d) ( h fi-^jftt^ y v a. it 
) , d= (C1+C2) /m (mo d n) , Ci = m • gi rl (mo d n) , C2 = 
m • g2 r2 (mo d n) 0 
[0 18 3] 
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^Bf^ljcS (C C A 2 ) H^LT^iSttt^^^T, J: MIRJSO^^Bg-t 
[0 18 4] 

±iaBt^c <7)SLm^^<7)it^^^f o 7t x - * zwm Ltzr- 

ttf£ Lv^ 0 
[0 18 5] 

-eti^x., fl!)xJ£\ Bg^CC#iti^>SLM^<7)-r-^^^?SL7t:2tTf 
[0 18 6] 

[0 18 7] 

±iBBg-t^^m(±, mwm^xctz nttm^xci, c 2 «-*Htu * 

, fMaJOfcTy h bi= 10*#KI±, gLM^R 2 *i)n#LTV^< ^<hT\ l©-^ 
[0 18 8] 

^fn = pqt 2o<7)£Li$:s, t <h , llCm o d n Oftdf&Jfe tTt# 
^tt^^i^OS^^g^^fflv^TTlS^P^^: (1) , (2) 
gl, g 2 i:^lii:ltfflv^^U:, £Ltfcr£ffl^T, TE«H#* (3 



2003-3105747 



!&m 2 0 0 3 - 0 1 6 7 6 1 ^~ v : 42/ 

) , (4) -Ci$t$tLZ>¥Xm*VSftitLt:mi3r-XC= (Ci,C 2 ) fc£«U 7 

x^*e-o/h5ga*fflv*TT8Bow«^: (5) , (6) -cmzti&^mm^Xa 
^ (7) zmtz-r^jcmzm&L, m^immzn^m^tmn^&izwz-x^ 



gl=g s(p-l) (mo d n) (1) 

g 2=g t(q-l) ( mo d n) (2) 

Cpm • gj rl (mod n) (3 ) 

C2 = m • g2 r2 (mo d n) (4) 

a = C i (modp) = m (modp) (5) 

b = C2 (modq) = m (modq) (6) 

m=aAq+bBp (modn) (7) 



(tztzL, gcd Is, q-ll = K gcd It, p — 1 I = K Aq (mo 
dp) = K Bp (modq) = Uf^>) 0 
[0 18 9] 

f^i, ^ItU^Utgi, g2«ix -C-^-etL (p-1) , (q- 

i) o^zmz-SAs-cte*). <^mm in, gl , g2 i zm^xtkj&Ltzm^jcc 

1, C2^> (p-D , (q-l) <9^§f££^ft^;h/^-ev> -OHf 
^Ci, C2*SE^b-t"*l^^i3V»T. 7x^7-(0/J^l (aP-!=l (mo 
dp) ) ffi^^^i-^^ fcv* 5 S&**i*1-*o iot 

[0 19 0] 

:£§§l^?t^{t^fi{±, W±OJ:9l^ ftp, qWHpt»*»tU4 
j£U ^ln = pq^ atst, ItCmodnWif^ILt#P)Wi 
ffi»O«^Jfi«gfcS:fflv»rTIE<0M#S: (1) ■C*$fL*g 1 fcS:^H!ait 
Lt^L, ADZtlfz^Xml.ZftLX. ±.tttfflm In, gl | jSi^SUfcr 

zm^x. rmcomi^ (3) • -ci^iisii^c^ u 7i^7-o/h 
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gl— g s (P"~l) (modn) 
C = m • g r (modn) 
m = C (m o d p ) 



(8) 



(3) 



(1) 



(fcrtfU gcd Is, q-ll =lti"*) o 
[0191] 

**u9>x.* In, gil «:ffl^T^L7tB&^C{±, (p-1) <7>^ 

^^^^-Ax-ev^^> ^1*6. 71^-7-^1 ( a P-!=l (mo dp) ) 
T , <50Bf ^ C £ ffiiji izQ&it-t 2>Zt&X*£2>t^7 £ £1" * o 
[0 19 2] 

iot, #|£&«lt Ip, ql £ffl^T, ffi^^ft^T^^H In, g if 

7x^7- o/h^s *f * ffl v > & c: t -e w# tcftlf-c # & A6 , l« <?>G&VcJj 

[0 19 3] 

#^^»^i«S g i: ^fflv^Tl^r« (1) , (2) -e^$*i 
, IM'&m^ In, gi, g 2 l & <fc tfftSfc r 1 , r2^fflK, TfBOMflbS ( 

3) , (4) xmzn&m^xc h c 2 z^i&i-&^i\:&M^&tzm^f2m 
^imwt, ±iBie^-'ffc«ifc*m$*tfe«F-^s:ci > C2*$flrL, -7^-7- 

^/J^aSrfflv^TTIBOM^ (5) , (6) tt&^fSBf-^t a , b 

m^mm^x a , bfrh, *mAM£%m*m^~c. ria^M^ (7) 

gl= g s (P-D (modn) ( 1 ) 

g 2=g t(q-l) (modn) (2) 

C i = m • g i f l (modn) ( 3 ) 

C2 = m • g2 r ^ (modn) (4) 
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a = C i (modp) =m (modp) 
b = C2 (modq) =m (modq) 
m=aAq+bBp (modn) 



(5) 



(6) 



(7) 



(fztzL, gcd Is, q — 1 | =1, gcd It, p-l( =1, Aq (mo 
dp) = 1 , Bp (modq) =1 tir2>) 0 
[0 1 9 4] 

•€-*u9>x., Bf^k^a^isv^T, &H!«fc L-C£j£Lfcftgi, g2^ 
*i (p-1) , (q-1) <7)^§#|i£-^A,-C;j3lK ^P?flM In, gl , g 2 l 
^TMtTtiHf-^Ci, C 2 ^^ (p-1) , (q-D (D^^mtr^ti^ti^ 
AsX^&tztb, tl^b^fi^^v^T, 7x)l7-(0/J^l (aP"l=l (mod 

p) ) zm^x, Bf^ci, c 2 ^w^t'ti^b-r^-<b^-e^^>hv^^* 

[0 19 5] 
[0 19 6] 

^IP^OIg-tvXirAti, Jil±<7>J:d^ ftp, q^Hp^ItitLT 
£jftU -eof!n = pqh, SLi&si:, IttCmo d n^^lLtH^tL^) 

*^c7)ft^«g t i:m^xrti<Dm^ (1) g^^nn 
a«t^it^^ A^^n^^mn^LT, jl§s&bb& In, g 



gl = gs(p-D (modn) ( 1 ) 

C=m-g r (modn) (3)' 

m = C (modp) (8) 



(fzfzL, gcd Is, q-ll =l£-f&) o 
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[0 19 7] 

zfubx.. Bg^k^s^i3v>T, u, git zm^xftrnztitzm^ir 

-<7)/J^S (aP-l=l (mo dp) ) iO«tiC «:W#tw«^fc 

[0 19 8] 

[0 19 9] 

U -tOifltn = p q , 2o£7)gLis, t It^m o d nOil^lLTH 

p>ti^f S^of ^:4Mg t^fflv^TTfe<7)WM (l) , (2) -e^£*i& 
gl, g 2 £*2;fflM£ LX$L$L-fZ>t t *>K, A^?tLf:¥imt:ML-C, JtfB 
In, gi, g 2 l ^iOTr 1, r2^fflv^ TISOM^ (3) , 

(4) -e^^tv^Bf^Ci, C 2 ^^irh^itl5 : (^xh^ 0 

gl=g s(p-l) (mo d n) (1) 

g2=g t (Q~l) (modn) (2) 

Ci = ra • gi rl (mod n) (3) 

C2 = m • g2 r2 (modn) (4) 

(fztzL, gcd Is, q-ll =1, gcd It, p-l| =1 tt*) o 
[0 2 0 0] 

f^x., Lx*kmLtzmg\, g2^ -en-en (p-d , u- 
i) (D^^mtt^^x&n, u, gl , g2 l ^v>t«L/:^c 

1, C2^)> (p-1) , (q-D (D-^^mtttlt^A'X^&fztb, Z\<Dm 
^Ci, C2*^it-fZ>V%^&^X, 7x^7-«l (aP-l=l (mo 

dp) ) £ffiv>T, t^-e§^. tv^M$:it^o 

[0 2 0 1 ] 

ttiliE#2 003-3105747 
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[0 2 0 2] 

*&m<M$ftitfi&H> &_tO«fc 3 Sip, qOHp^ItLt^ 

^f^4IIgt^fflv^TfaoiM (1) -C^^tL^gifc^^at 
LT^ntttt:, X*$^¥*mtc*tL-C, ±IS<&^^ In, gl } & 
J: tracer Srfflv^r, TIBOBB^S: (3) ' t?^ $ ft* C fif-^ 

gl=g s(p-l) ( mo d n) ( 1 ) 

C=m-g r (modn) (3)' 

(fcrtrU &BHtiMSb=size of p (bits) t*o"C, 0<m<2b-l, g c d 

is, q - i } =1 fc-ra) o 

[0 2 0 3] 

*ft*3>x., LtML/cigiii:, (p-1) (D^ZmtG 

s <^mm In, gi, g 2 l fcffi^T^J&Lfcllt^fcCifc, (p-1) <7)^§^ 

a (aP"l=l (mo dp) ) £fflv>T, IBM! fc«#ffc-r & £ <h ^"C § & t ^ 

[0 2 0 4] 

[0 2 0 5] 

U Wn = pqt, 2o<7)gL^s, StCmo d n««LT|# 

e>ii&J|feft»<0*^lfiaSg fcSrfflv>-rTIEOM#S: (1) , (2) -C^£ft& 
gl, g2t^iIiLtfflv^tt^:, Mr 1, r 2 £ffiv>T, Tffi<7>P>5 
(3) , (4) T|t£ft&¥:£m£B^1fcL^B^:$CC = (Ci, C 2 ) £^ 
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y ^.)\y-7~(D4^m^m^'cmcom^ (5) , (6) xm^n^^m 

o 

gl=g s ^ p_1 ' ) (modn) (1) 



g2 = gt(q-l) (modn) (2) 

C i = m • g } rl (modn) (3) 

C2 = m • g2 r ^ (modn) (4) 

a = C i (modp) =m (modp) (5) 

b = C2 (modq) =m (modq) (6) 

m=aAq+bBp (modn) (7) 



(fzfzL, gcd Is, q-ll = 1 , gcd It, p — 1 I = KAq (mo 
dp) =1, Bp (modq) =ltt4) 

-e*u9>x., ^fttLt^iL^agi, g2«i^ *ti*rti (p-i) , (q- 

1) O^gJfefc-g^TMSiK 2rK§» In, gl , g 2 l *ffl^TtlSLfclt*JC 
1, C2^ (p-1) , (q-1) O^iffeSr-e-tl^^-CV^^ii). -OBf 
^Ci, C 2 *^1t-f2>m^&^X, 7x^7-^$i ( a p-l=i ( m o 

dp) ) ffi^^i^k-r^-<h^-e§, ^(Dm-^it^titmLx 

[0 2 0 6] 

*5£W<r>m^ikJjm±. ^i^^ ftp, qwHpMIHTi 
tL, Wn = pqh, SLftsfc, ItCm o d n <Dm%*M VX%h ti&m 

mw<Dm*&i&Mgtzm^xTnZ<7)rm$: (1) -c^sftagi 

LT£J5ftU A^Sftfc^ZfcmKtfLT, ±fB^r^M In, gl | fcJ:ll f a»r 
£ffiv>T, TffiOM^ (3) ' T^S*i&Bg-^;fc:C£^f U 7 a. 

^s^fflv^TTfeor«^: (8) £i-¥3cm£*tau m^mmzft^m 
^it-fimx&Zo 

gl=g s(p-l) (modn) (l) 

C=m • g r (mo d n) ..... (3) ' 
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m = C (m o d p ) (8) 

(fc£U gcd Is, q — 1 I = 1 

-etL^x., £|§j§& In, gl | £ffiv>-C&j£Lfclfc-5":fcCld\ (p-1) 
A, -CV>&£:*6, "7 ji;U-e-<7)/J^31 (aP-i^l (mo dp) ) 

[HI] 
[EI 2] 

f ibis i ^I^Mwttt^f It:^t7'n ^it^o 

[0 3] 

[^<£>f£0J!] 

1 0 vXf A 

i i m^itmm 
1 2 mtkt&u. 

1 3 Bf^fk^»^« 

l 4 iilTO 

1 5 w%\mnm.w. 

n tefflm (2o^^^|W) 

gl, g2 

p, q (20^^^!) 

c m^x 

Ci, C 2 Bf^3t 
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[wm&] mm 

[Ell] 



SB 









! A 










LO 


■A 






T 





■R 
33 




U 

•Me 



C2. 

-Ha 


m 


— > 
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[HI 2] 




c 
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[03] 

k+1 



<= — — ^ 






c 2 


c 3 


• • • 


c i 


• • • 





C 1 =(C 11 , C 12 ), C n =m 1 R 1 (mod n), C 12 =m 1 R 2 (rnod n) 
C^rrij <8>R b . + 1 ; b^Oorl, 2 < i < k<|_log 2 nJ 
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mm) 

«b £ n x. £ Bt ^ -> 7s 7- u , Bt^-f t^ffiis «t u^i-^ib^ & £ * 0 
m-fc^m ptfy^fAioit Bf^b^e 1 1 , mm 1 4 , ^.tw 

itil^I 1 5«rHlx."CV^ 0 H^tSll 1 1 2fi. 2rHf|& Ig 

1, g 2 f (p-1) . (q-D (D^$m*^m\Mt fl^b 

-sHb-r&o 

[WIEI] El 1 
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mm^r [000005049] 
1 . tM^fl 0 1990^ 8H29S 



1 . MM^R B 
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